Homeland 
Security 

Daily Open Source Infrastructure Report 

21 July 2015 

Top Stories 

• An elevated section of Interstate 10 in Desert Center, California collapsed July 19 due to 
heavy rains and floods, while westbound lanes were closed indefinitely. - KNBC 4 Los 
Angeles (See item 8) 

• As many as 4.5 million patients at UCLA Health System may have been affected by a 
breach of unencrypted information discovered October 2014 and announced July 17. - 
Securityweek (See item 17 ) 

• All U.S. Marine Corps recruiting offices within a 40-mile radius of Chattanooga, 
Tennessee were closed July 17 in response to an attack on 2 military facilities which left 4 
Marines and one Sailor dead. - Marine Corps Times (See item 18 ) 

• The North Fire in San Bernardino National Forest burned 3,500 acres July 18, closing 1-15 
near Cajon Pass after destroying or damaging 30 vehicles. - KTLA 5 Los Angeles (See 
item 20) 
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Energy Sector 



1. July 19, iFreePress - (Wisconsin; Minnesota) Storm knocks out power to 225,000 in 
western Wisconsin and Minnesota. About 240,000 Minnesota and western Wisconsin 
residents lost power July 17 after a line of severe thunderstorms caused damage across 
the region. 

Source: http://www.ifreepress.com/businessfinance/6820-storm-knocks-out-power-to- 
225-000-in- western- wisconsin-and-minnesota 

2. July 17, Associated Press - (Montana) At least 35,000 gallons of oil spills after 
Montana train derailment. A train derailment in northeastern Minnesota spilled an 
estimated 35,000 gallons of oil July 16, forcing the evacuation of nearby homes. A 
HAZMAT team was able to contain the spill and no fire or injuries were reported. 
Source: http://www.foxnews.com/us/2015/07/18/at-least-35000-gallons-oil-spills-after- 
montana-train-derailment/ 



For another story, see item 24 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

Nothing to report 

Defense Industrial Base Sector 

See item 18 

Financial Services Sector 

3. July 20, Reuters - (International) Canadian pleads guilty in massive U.S. penny 
stock fraud case. A Canadian man pleaded guilty July 17 to charging U.S. penny stock 
investors with $5 million in fees for nonexistent services, stemming from a related 
$140 million penny stock fraud operation. Nine defendants in four countries have been 
charged in connection to both schemes. 

Source: http://www.reuters.com/article/2015/07/20/usa-crime-pennystock- 
idUSL2N0ZX28N20 150720 

4. July 17, KHQA 7 Hannibal - (Missouri) Three men arrested for 100+ fraudulent 
credit cards. Marion County, Missouri authorities charged 3 suspects with trafficking 
in stolen identities July 16 after discovering over 115 fraudulent credit cards and card- 
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manufacturing equipment in their vehicle in Palmyra. 

Source: http://www.connecttristates.com/news/story.aspx?id=1231823#.VazgJvlVhBc 

5. July 17, Chicago Tribune - (Illinois) FBI: Midday Bandit strikes again in Galewood 
bank robbery. Authorities are searching for a suspect dubbed the “Midday Bandit” 
who allegedly robbed a Galewood bank in Chicago July 17 and is believed to be 
connected to 6 other bank robberies and 2 attempted robberies dating back to 2014. 
Source: http://www.chicagotribune.com/news/local/breaking/ct-police-galewood-bank- 
robbed-20150717-story.html 

6. July 17, Reuters - (International) TD Bank to pay $20 million to settle Ponzi scheme 
lawsuit. TD Bank agreed to pay $20 million July 17 to resolve allegations from a class 
action lawsuit that the bank aided a $223 million-plus Ponzi scheme run on European 
investors by failing to properly monitor trust accounts and investigate suspicious 
activity. 

Source: http://www.reuters.com/article/2015/Q7/17/us-tdbank-ponzi- 
idUSKCN0PRlYX20150717 

7. July 17, Reuters - (International) JPMorgan reaches $388 min settlement in 
mortgage securities case. JPMorgan Chase & Co agreed to pay $388 million to settle 
charges brought by the Fort Worth Employees’ Retirement fund and other investors 
alleging that the bank misled them about the quality and safety of $10 billion worth of 
residential mortgage-backed securities leading up to the 2008 financial crisis. 

Source: http://www.reuters.com/article/2015/07/18/ipmorgan-mbs-lawsuit- 
idUSL2N0ZY01D20150718 

Transportation Systems Sector 

8. July 20, KNBC 4 Los Angeles - (California) Flooding, bridge collapse shut down 10 
Freeway east of Coachella. An elevated section of Interstate 10 in Desert Center, 
California collapsed July 19 due to heavy rains and floods. Transportation officials say 
the westbound side of the 10 Freeway was also damaged by flooding, leaving the 
interstate closed indefinitely. 

Source: http://www.nbclosangeles.com/news/Thunderstorms-Continue-Through- 
Weekend-317323541.html 

9. July 20, KWWL 7 Waterloo - (Iowa) Interstate 380 reopens after chase suspect hits 
squad car. Northbound 1-380 in Johnson County, Iowa was closed for nearly 3 hours 
July 20 while police investigated a crash that involved 2 Iowa State Patrol cars. 

Source: http://www.kwwl.com/story/29584353/2015/07/20/i-380-nb-near-north-libertv- 
closed-due-to-accident 

1. July 19, Corvallis Gazette -Times - (Oregon) Vehicle hits power pole, closes Highway 
20. Highway 20 in Albany was shut down for 5 hours July 19 after a car crashed into a 
utility pole and downed power and phone cables in the area. No injuries were reported. 
Source: http://www.gazettetimes.com/news/local/vehicle-hits-power-pole-closes- 
highway/article 0c8262a6-9001-54e3-a4c8-08a5ac648ad0.html 
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10. July 18, WSMV 4 Nashville - (Tennessee) Southwest flight diverted to Nashville. A 
Southwest Airlines flight from St. Louis, Missouri, to Newark, New Jersey, was 
diverted to Nashville International Airport in Tennessee July 18 due to an unruly 
passenger, delaying the flight about 4 hours. 

Source: http://www.wsmv.com/storv/29577888/southwest-flight-diverted-to-nashville 

1 1 . July 18, KRMG 740 AM - (Oklahoma) Major Tulsa highway shut down due to 
jumper threat. The Broken Arrow Expressway in Tulsa was shut down for several 
hours July 18 while police talked down a man who threatened to jump from the Peoria 
Avenue Bridge. No injuries were reported. 

Source: http://www.krmg.com/news/news/local/maior-tulsa-highway-shut-down-due- 
j umper-threat/nm24k/ 

12. July 18, Associated Press - (Alaska) 1 dead, 4 injured in Alaska plane crash, Coast 
Guard. Officials reported that a small plane operated by Wings of Alaska, a company 
that provides services to small southeast Alaska communities and includes sightseeing 
trips and charters, crashed July 17 in southeast Alaska and left 1 dead and 4 others 
injured. 

Source: http://www.foxnews.com/us/2015/Q7/18/l-dead-4-iniured-in-alaska-plane- 
crash-coast-guard-says/ 

13. July 17, New Haven Register - (Connecticut) Part of Route 7 in New Milford shut 
down after police chase, crash. Part of Route 7 in New Milford was shut down for 
approximately 4 hours July 17 after a speeding driver refused to pull over, prompting a 
police pursuit that ended with the alleged suspect driving at a trooper before crashing 
the vehicle. The suspect was taken to the hospital for evaluation. 

Source: http://www.nhregister.com/general-news/2015Q717/part-of-route-7-in-new- 
milford-shut-down-after-police-chase-crash 

For additional stories, see items 2 and 20 

Food and Agriculture Sector 

14. July 17, U.S. Food and Drug Administration - (National) It Takes A Village Foods 
LLC dba Veggie Evolution issues an allergy alert on undeclared soy in Veggie 
Evolution Kale crisps Zen Nori. The U.S. Food and Drug Administration reported 
July 17 that It Takes a Village Foods FFC, a Hailey, Idaho establishment, is recalling 
Veggie Evolution Kale Crisps Zen Nori due to an undeclared soy allergen. The product 
was distributed to retails stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm455315.htm 

Water and Wastewater Systems Sector 

15. July 17, Mason City Globe Gazette - (Iowa) Clear Lake chlorine leak contained; gas 
line repaired. Iowa officials reported July 17 that a chlorine leak at Clear Fake’s Water 
Treatment Plant prompted an evacuation of surrounding homes and HAZMAT crews 
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after a gas line was found cracked. Crews cleared the scene and repaired the leak. 
Source: http://globegazette.com/news/local/chlorine-leak-contained-in-clear- 
lake/article 25917ac8-b9f6-50a0-8b2d-0a42dcc49daf.html 



16. July 17, KATC 3 Lafayette - (Louisiana) Mire Branch Water System issues boil 
advisory. The Mire Branch Water System in Church Point announced a system-wide 
water boil advisory July 17 after experiencing low water pressure since July 16. 
Source: http://www.katc.com/storv/29573818/mire-branch-water-system-issues-boil- 
advisory 

Healthcare and Public Health Sector 

17. July 17, Securityweek - (California) Details of 4.5 million individuals exposed in 
UCLA Health breach. As many as 4.5 million patients at UCLA Health System may 
have been affected by a breach of unencrypted information discovered October 2014 
and announced July 17. The hospital is working with the FBI and computer forensics 
experts to investigate the incident, and is offering a year of identity theft recovery 
services as well as a year of free credit monitoring for affected individuals. 

Source: http ://www . securityweek.com/details-45-million-indi viduals-exposed-ucla- 
health-breach 



Government Facilities Sector 

18. July 19, Marine Corps Times - (National) Marine recruiters told not to wear 
uniforms after attack. All Marine Corps recruiting offices within a 40 mile radius of 
Chattanooga, Tennessee were closed July 17 in response to an attack on 2 military 
facilities which left 4 Marines and 1 Sailor dead. Governors in at least six states 
ordered National Guardsmen to be armed and Marine recruiters not to wear uniforms in 
public while the incident continues to be investigated. 

Source: http://www.marinecorpstimes.com/storv/militarv/2015/07/18/marine- 
recruiters-told-not— wear-uniforms-offices-closed/30353587/ 

19. July 18, KTLA 5 Los Angeles - (California) Pines Fire grows to 200 acres; 
evacuations at multiple campgrounds remain in place. Over 300 campers were 
evacuated from campgrounds in Angeles National Forest July 18 due to the 200-acre 
Pines Fire. Evacuees were taken to Serrano High School in Phelan, California, which 
had already been established as an evacuation center for the North Fire. 

Source: http://ktla.com/2015/07/18/pine-fire-grows-to-125-acres-evacuations-at- 
multiple-campgrounds-remain-in-place/ 

20. July 17, KTLA 5 Los Angeles - (California) 3,500-acre North Fire in Cajon Pass 
burns homes and vehicles, shuts down 15 Freeway. The North Fire in San 
Bernardino National Forest burned 3,500 acres July 18, forcing the closure of the 1-15 
Freeway near Cajon Pass after it destroyed 20 cars and damaged 10. An evacuation 
center was established at Serrano High School in Phelan, California for Baldy Mesa 
residents. 

Source: http://ktla.com/2015/07/17/15-freeway-shut-down-in-caion-pass-due-to-30- 
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acre-north-fire/ 



For additional stories, see items 17 and 21 

Emergency Services Sector 

21. July 19, Associated Press - (Maryland) Baltimore officer stabbed multiple times, 
man charged. A Baltimore man was charged July 19 for attempted murder after 
stabbing a police officer July 18 in the lobby of the Varsity Apartments, a housing unit 
for University of Baltimore students. 

Source: http://www.policeone.com/edged-weapons/articles/8684530-Baltimore-officer- 
stabbed-multiple-times-man-charged 

22. July 17, Associated Press - (Oregon) ‘Chemical’ device causes evacuation at 
Klamath County Jail. The Klamath County Jail issued a lockdown and evacuation of 
100 people after State police found a “chemical destructive device” in the entrance of 
the facility July 9. A bomb squad neutralized the device and an investigation is 
ongoing. 

Source: http://democratherald.com/news/state-and-regional/chemical-device-causes- 
evacuation-at-klamath-county-jail/article 736b34c4-cl37-5e8d-9f66- 
bcl6flda5eaf.html 



For another story, see item 9 

Information Technology Sector 

23. July 20, Help Net Security - (International) Ashley Madison hacked, info of 37 
million users stolen. Hackers calling themselves “The Impact Team” reportedly 
accessed and stole personal information and financial records of 37 million of Avid 
Life’s Ashley Madison Web site as well as user databases for 2 other sites that the 
company owns. The hack was perpetrated in response to Avid Life’s failure to provide 
its offered “full delete” feature for user profiles. 

Source: http://www.net-security.org/secworld.php?id=18643 

24. July 17, Securityweek - (International) Eaton patches TCP/IP stack flaw affecting 
controls, relays. Eaton released software updates addressing a remotely executable 
Transmission Control Protocal/Intemet Protocol (TCP/IP) stack vulnerability in its 
Cooper Power Series Form 6 recloser control and Idea/IdeaPLUS relay protection 
platforms that could allow an attacker to launch man-in-the-middle (MitM) attacks and 
execute arbitrary code or crash systems connected to the Internet. 

Source: http://www.securityweek.com/eaton-patches-tcpip-stack-flaw-affecting- 
controls -relays 

25. July 17, Securityweek - (International) CVS investigating possible payment card 
breach, shuts down photo Web site. CVS reported that the company had shut down 
its CVSPhoto.com Web site while it investigated a possible payment card beach of the 
independent vendor that manages and hosts the site, PNI Digital Media. Company 
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officials confirmed that purchases made in-store and on other CVS Web pages are not 
affected. 

Source: http://www.scmagazine.com/cvs-investigating-possible-pavment-card-breach- 
shuts-down-photo- website/article/427 116/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

26. July 18, WSAW 7 Wausau - (Wisconsin) NOAA weather radio station in Wausau is 
off the air. The National Weather Service in Green Bay reported that the U.S. National 
Oceanic and Atmospheric Administration Weather Radio Station WXJ89 in Wausau 
has been down since July 17 due to an equipment issue. Crews hoped the station could 
be restored by July 20 or July 21. 

Source: http://www.wsaw.com/home/headlines/NOAA-Weather-Radio-Station-in- 
Wausau-is-Off-the- Air-3 1 699426 1 .html 



Commercial Facilities Sector 

27. July 20, WLBT 30 Jackson - (Mississippi) Downtown Jackson Marriott Hotel 
evacuated after fire. A July 19 fire prompted the evacuation of the Marriot Hotel in 
Jackson, Mississippi after starting inside a dumpster near the back of the hotel. Crews 
extinguished the flames and no injuries were reported. 

Source: http://www.msnewsnow.com/storv/29583589/downtown-iackson-marriott- 
hotel-evacuated-after-fire 

28. July 20, St. Joseph News- Press - (Missouri) Blaze in King City destroys apartment 
homes. A July 19 fire extensively damaged converted apartments in King City, 
Missouri, and prompted fire crews to remain onsite for about 4 hours to extinguish the 
flames. No injuries were reported. 

Source: http://www.newspressnow.com/news/local news/article 3edee47b-3d03-5a2f- 
acbb-03ab2962dce8.html 

29. July 19, WTEN 10 Albany - (New York) Lightning strike sets apartment roof on 
fire. The Hudson Preserve Apartments in Latham, New York sustained extensive 
damage following a July 19 roof fire that began after lightning stuck the building. Four 
families were displaced and no injuries were reported. 

Source: http://newsl0.com/2015/07/19/lightning-strike-sets-apartment-roof-on-fire/ 

30. July 19, WD1V 4 Detroit- (Michigan) Cars catch fire outside Comerica Park. A July 
19 fire in a parking lot outside of Detroit’s Comerica Park destroyed 7 vehicles while 
the vehicle owners attended a baseball game. No injuries were reported and the cause 
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of the fire may be linked to cut wires running between the parking lot’s attendant hut 
and billboard. 

Source: http://www.clickondetroit.com/news/cars-catch-fire-outside-comerica- 
park/34244778 

31. July 19, WFAA 8 Dallas - (Texas) Fire damages three units at Northeast Dallas 
apartments. A 2-alarm fire at the Slopes on Calais apartments prompted 
approximately 50 firefighters to contain the incident, damaged 3 apartment units, and 
displaced 10 residents July 19. No injuries were reported. 

Source: http://www.wfaa.com/story/news/local/201 5/07/1 9/two-alarm-apartment- fire- 
damage/3039067 1/ 

32. July 18, St. Clair Missourian - (Missouri) Excavator caused gas leak in St. Clair 
Plaza area. More than 20 businesses in St. Clair Plaza Area were evacuated July 14 
after an excavator working behind a store hit a gas line, prompting HAZMAT crews to 
respond to the incident. No injuries were reported. 

Source: http://www.emissourian.com/local news/saint clair/excavator-caused- gas- 
leak-in-st-clair-plaza-area/article ad49ac9e-2caf- 1 Ie5-b737-4f2609c3e440.html 

For another story, see item 25 

Dams Sector 



Nothing to report 
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NTAS 

NUi Terror hm Mklw»cy Sy*itni 

NO ACTIVE ALERTS 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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